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FN THE CLAIMS 
Pending claims follow: 

1 . (Original) In an environment that includes a plurality of users , 
wherein each user possesses secrets that are shared by respective sets of said 
plurality of users, a secret updating method, comprising: 

(a) updating at least one compromised secret known by at least one 
evicted user using at least one non-compromised secret that is not known by sai< 
at least one evicted user. 

2. (Original) The method of claim 1 , wherein said updating 
comprises updating a plurality of compromised secrets. 

3 . (Original) The method of claim 1 , wherein said updating 
comprises updating all compromised secrets, 

4. (Original) The method of claim 1, wherein said updating 
comprises updating at least one compromised secret known by one evicted user 

5. (Original) The method of claim 4, wherein said updating occurs 
upon an eviction event 

6. (Original) The method of claim 1 » wherein said updating 
comprises updating at least one compromised secret known by a plurality of 
evicted users. 

7. (Original) The method of claim 6, wherein said updating occurs 
on a periodic basis. 

NAI1P089/00. 175.01 -2- 



PAGE 5/9 * RCVD AT 8/3(2005 7:36:46 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-6/29 * DNIS:2738300 * CSID:408 971 4660 * DURATION (mm-ss):02-22 



rn 



Rug 03 05 04:37p 



SVIPG 



408 971 46G0 



8. (Original) The method of claim 1 , wherein said updating 
comprises updating a compromised secret using one non-compromised secret. 

9. (Original) The method of claim 1 , wherein said updating 
comprises updating a compromised secret known by a set of users using a non- 
compromised secret of a subgroup of said set of users. 

1 0. (Original) The method of claim 1 , wherein said updating does not 
use new secret information. 

1 1 . (Original) The method of claim 1, wherein said compromised 
secret is shared by said plurality of users. 

12. (Original) The method of claim 1 > wherein said secrets enables 
secure communication. 

1 3 . (Original) In an environment that includes a plurality of users , 
wherein a first user possesses a set of keys, said set of keys including a first key 
that enables secure communication among a set of users, said set of users 
including at least said first user and a second user, a keying method, comprising: 

(a) upon eviction of at least said second user, determining an updated 
first key using information that includes said first key and a second key, wherein 
said second key enables secure communication among a subgroup of said set of 
users, wherein said subgroup does not include users subject to said eviction. 

14. (Original) The method of claim 13, wherein only said second 
user is evicted. 

15. (Original) The method of claim 1 3, wherein said second user and 
one or more other users in said set of users are evicted. 
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16. (Original) The method of claim 1 3, wherein said determining 
uses a function having the following properties: (1) knowledge of said updated 
first key does not give knowledge of said first key or said second key, (2) 
knowledge of said first key does not give any knowledge of said updated first 
key, and (3) knowledge of said first key and said updated first key does not give 
any knowledge of said second key. 

1 7. (Original) The method of claim 1 6, wherein said determining 
uses a one-way function. 

1 8. (Original) The method of claim 17, wherein said updated first 
key is equal to F(first key, second key), wherein FQ is a one-way function. 

19. (Original) The method of claim 13, wherein said determining 
uses only said first key and said second key. 

20. (Original) The method of claim 13, wherein said subgroup 
includes only said first user. 

21 . (Original) The method of claim 13, wherein said subgroup 
includes a plurality of users. 

22. -27. (Cancelled) 

28. (Original) A keying method in an environment having a plurality 
of users , each user being capable of storing a set of keys that enable secure 
communication among sets of said plurality of users, comprising: 
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(a) distributing first information that enables users to update, after 
eviction of one or more users, a set of compromised keys that are known to said 
one or more users without receiving new key information. 

29. (Original) The method of claim 28, wherein said first information 
includes information that enables identification of a one-way function. 

30. (Original) The method of claim 28, wherein said first information 
includes information that enables identification of said evicted one or more 



users. 



31.-37. (Cancelled) 

38. (Original) A secret sharing system, comprising: 

a key server that distributes secret information to a plurality of users, 
wherein each user is sent secrets that are shared by respective sets of said 
plurality of users, said key server being operative to update at least one 
compromised secret known by at least one evicted user using at least one non- 
compromised secret that is not known by said at least one evicted user. 

39. (Original) A computer program product, comprising: 
computer-readable program code for causing a computer, in an 

environment that includes a plurality of users, wherein each user possesses 
secrets that are shared by respective sets of said plurality of users, to update at 
least one compromised secret known by at least one evicted user using at least 
one non-compromised secret that is not known by said at least one evicted user; 
and 

a computer-usable medium configured to store the computer-readable 
program codes. 
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